{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,20]],"date-time":"2026-03-20T15:53:04Z","timestamp":1774021984381,"version":"3.50.1"},"reference-count":57,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,10]]},"DOI":"10.1109\/icnp.2019.8888057","type":"proceedings-article","created":{"date-parts":[[2019,10,31]],"date-time":"2019-10-31T23:49:43Z","timestamp":1572565783000},"page":"1-12","source":"Crossref","is-referenced-by-count":42,"title":["NETHCF: Enabling Line-rate and Adaptive Spoofed IP Traffic Filtering"],"prefix":"10.1109","author":[{"given":"Guanyu","family":"Li","sequence":"first","affiliation":[]},{"given":"Menghao","family":"Zhang","sequence":"additional","affiliation":[]},{"given":"Chang","family":"Liu","sequence":"additional","affiliation":[]},{"given":"Xiao","family":"Kong","sequence":"additional","affiliation":[]},{"given":"Ang","family":"Chen","sequence":"additional","affiliation":[]},{"given":"Guofei","family":"Gu","sequence":"additional","affiliation":[]},{"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","year":"2019","journal-title":"Second-generation of worlds fastest p4-programmable ethernet switch asics"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486011"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787501"},{"key":"ref32","first-page":"97","article-title":"Stateless network functions: Breaking the tight coupling of state and processing","author":"kablan","year":"2017","journal-title":"14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 17)"},{"key":"ref31","first-page":"523","article-title":"Maglev: A fast and reliable software network load balancer","author":"eisenbud","year":"2016","journal-title":"13th USENIX Symposium on Networked Systems Design and Implementation (NSDI 16)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486026"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2626317"},{"key":"ref36","author":"articles","year":"2018","journal-title":"5 most famous ddos attacks"},{"key":"ref35","first-page":"203","article-title":"Netbricks: Taking the v out of nfv","author":"panda","year":"2016","journal-title":"12th USENIX Symp Operating Systems Design and Implementation (OSDI 16)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2019.2894189"},{"key":"ref28","first-page":"151","article-title":"Client puzzles: A cryptographic countermeasure against connection depletion attacks","volume":"99","author":"juels","year":"1999","journal-title":"NDSS"},{"key":"ref27","author":"bernstein","year":"2018","journal-title":"Syn cookies"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199329"},{"key":"ref2","year":"2018","journal-title":"The real cause of large ddos - ip spoofing"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/997150.997156"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/571697.571724"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2004.842221"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383061"},{"key":"ref24","first-page":"45","article-title":"Resource containers: A new facility for resource management in server systems","volume":"99","author":"banga","year":"1999","journal-title":"OSDI"},{"key":"ref23","first-page":"365","article-title":"Passport: secure and adoptable source authentication","author":"liu","year":"2008","journal-title":"Proceedings of the 5th USENIX Symposium on Networked Systems Design and Implementation"},{"key":"ref26","first-page":"59","article-title":"Defending against denial of service attacks in scout","volume":"99","author":"spatscheck","year":"1999","journal-title":"OSDI"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/844128.844134"},{"key":"ref50","year":"2018","journal-title":"The CAIDA Anonymized Internet Traces 2016 Dataset"},{"key":"ref51","first-page":"125","article-title":"Stateless datacenter load-balancing with beamer","volume":"18","author":"olteanu","year":"2018","journal-title":"USENIX Symposium on Networked Systems Design and Implementation (NSDI'04)"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230555"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098829"},{"key":"ref55","first-page":"161","article-title":"Blink: Fast connectivity recovery entirely in the data plane","author":"holterbach","year":"2019","journal-title":"16th USENIX Symposium on Networked Systems Design and Implementation (NSDI 19)"},{"key":"ref54","first-page":"67","article-title":"Evaluating the power of flexible packet processing for network resource allocation","author":"sharma","year":"2017","journal-title":"NSDI"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132751"},{"key":"ref52","article-title":"Netchain: Scale-free sub-rtt coordination","author":"jin","year":"2018","journal-title":"15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)"},{"key":"ref10","first-page":"249","article-title":"Network requirements for resource disaggregation","volume":"16","author":"gao","year":"2016","journal-title":"OSDI"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787484"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"ref12","first-page":"115","article-title":"Large-scale ip traceback in high-speed internet: Practical techniques and theoretical foundation","author":"li","year":"2004","journal-title":"Security and Privacy 2004 Proceedings 2004 IEEE Symposium on"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/347057.347560"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383060"},{"key":"ref15","doi-asserted-by":"crossref","first-page":"878","DOI":"10.1109\/INFCOM.2001.916279","article-title":"Advanced and authenticated marking schemes for ip traceback","volume":"2","author":"song","year":"2001","journal-title":"INFOCOM 2001 Twentieth Annual Joint Conference of the IEEE Computer and Communications Societies Proceedings IEEE"},{"key":"ref16","first-page":"114","article-title":"Centertrack: An ip overlay network for tracking dos floods","volume":"21","author":"stone","year":"2000","journal-title":"USENIX Security Symposium"},{"key":"ref17","article-title":"Implementing pushback: Router-based defense against ddos attacks","volume":"2","author":"ioannidis","year":"2002","journal-title":"NDSS"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/964725.633032"},{"key":"ref19","first-page":"1557","article-title":"Save: Source address validity enforcement protocol","volume":"3","author":"li","year":"2002","journal-title":"INFOCOM 2002 Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies Proceedings IEEE"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948116"},{"key":"ref3","year":"2018","journal-title":"State of IP Spoofing"},{"key":"ref6","year":"2018","journal-title":"World's fastest P4-programmable Ethernet switch ASICs"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2006.890133"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098824"},{"key":"ref7","year":"2018","journal-title":"XPliant Ethernet Switch Product Family"},{"key":"ref49","author":"consortium","year":"2014","journal-title":"Behavioral model (bmv2)"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132764"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637232"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/90.649563"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3286062.3286063"},{"key":"ref47","first-page":"1","article-title":"Onix: A distributed control platform for large-scale production networks","volume":"10","author":"koponen","year":"2010","journal-title":"OSDI"},{"key":"ref42","article-title":"Scaling hardware accelerated network monitoring to concurrent and dynamic queries with* flow","author":"sonchack","year":"2018","journal-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934900"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3234200.3234205"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190558"}],"event":{"name":"2019 IEEE 27th International Conference on Network Protocols (ICNP)","location":"Chicago, IL, USA","start":{"date-parts":[[2019,10,8]]},"end":{"date-parts":[[2019,10,10]]}},"container-title":["2019 IEEE 27th International Conference on Network Protocols (ICNP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8884214\/8888028\/08888057.pdf?arnumber=8888057","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,19]],"date-time":"2022-07-19T20:22:25Z","timestamp":1658262145000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8888057\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/icnp.2019.8888057","relation":{},"subject":[],"published":{"date-parts":[[2019,10]]}}}